REMARKS 

Claims 1-50 are pending in the present application. Applicants have amended 
Claims 2, 25 and 48 herewith. Reconsideration of the claims is respectfully requested. 

Amendments were made to the specification to correct errors and to clarify the 
specification. No new matter has been added by any of the amendments to the 
specification. 

I. Objection to Specification 

The Examiner objected to the Specification, stating that the disclosure contains an 
embedded hyperlink and/or other form of browser-executable code, and that the abstract 
exceeds the allowable work count of 50 to 150 words. Applicants have amended the 
Specification herewith to eliminate the hyperlink and to reduce the word count of the 
abstract. Therefore, the objection to the Specification has been overcome. 

II. Objection to Drawing 

The Examiner, on the Office Action Summary page, checked the box at item 
10(b) indicating that the drawings are objected to. However, in the detailed action, no 
reasons were given by the Examiner as to the basis of such drawing objection. Further 
clarification is requested. 

III. 35 U.S.C. $ 102, Anticipation 

A. The Examiner rejected Claims 1-5, 10-11, 24-28, 33-34 and 47-50 under 35 
U.S.C. § 102 as being anticipated by Pravetz et al. (U.S. Patent No. 6,205,549). This 
rejection is respectfully traversed. 

Generally speaking, the claimed invention is directed to a method, apparatus and 
program product for presenting and modifying an enveloped data object. This is in 
contrast to the teachings of the Pravetz reference which expressly teach away fi-om 
Applicants claimed invention. As stated by Pravetz Col. 1, lines 29-31: 

"When used to encrypt data, a PKCS#7 object is designed to encapsulate a 
single encrypted copy of the data to be encrypted". 
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Pravetz then goes on to state at Col. 1, lines 47-51 : 

"It is therefore desirable to have a method and apparatus to incorporate the 
advantages found in PKCS#7 standard into providing secured access to a 
PDF document/data in a PDF file and overcome the disadvantages of the 
PKCS#7*s forced document encapsulation." 

Thus, Pravetz expressly teaches away from using an enveloped data object for document 
encapsulation. Pravetz instead teaches incorporating a PKCS#7 object within a 
traditional PDF file. Thus, the resuUing PDF file as taught by Pravetz is composed of (1) 
traditional PDF documents data and (2) a PKCS7 object. This can be seen in Pravetz 
Figure lb, where PDF file 110 contains traditional pdf document data 113 and in addition 
includes a PKCS7 object 1 17. While the PKCS7 object is an enveloped data object, the 
PDF file 1 10 is not an enveloped data object. Again, Pravetz expressly teaches away 
from using a PKCs#7 object to encapsulate data to be encrypted. 

Specifically with respect to Claim 1, the cited reference does not teach the 
claimed steps of "presenting an enveloped data object; and modifying the enveloped data 
object through processing of user actions within a graphical user interface". An 
enveloped data object is a well-known, well-defined and well-documented term of art 
(Specification page 5, lines 22-30). While the cited reference does in fact make reference 
to such an object (PKCS7 Object, reference #1 17 in Figures la and lb), the reference 
does not provide any ability to modify such object through processing of user actions 
within a graphical user interface, as claimed. The Examiner cites Pravetz Col. 3, lines 1- 
25 and Figure 1 as teaching all the claimed features of Claim 1. Applicants show that 
there, Praitz states: 

"FIG. lb illustrates the preferred embodiment of the present 
invention. In this embodiment, the storage device 104 has a portable 
document format (PDF) file 1 10 with a PDF document/data 113 and a 
PKCS#7 object 117 with a recipient Hst 115. 
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PDF is a file format utilized to represent a document in a manner 
independent of the application software, hardware and operating system 
used to create it. A PDF document/data 1 13 contains one or more pages, 
each page in the document containing a combination of text, graphics and 
images. A PDF document/data 113 may also contain information such as 
hypertext links, sound and movies. 

The PDF document/data 113 may be browsed or viewed through a 
PDF viewer application 114 providing a graphical user interface (GUI). 
Adobe Acrobat Exchange ™ or Acrobat Reader applications, both made 
available by Adobe Systems, Inc. of San Jose, Calif are exemplary PDF 
viewer applications 114. 

The present invention encapsulates the PKCS#7 object 117 into the 
PDF file 1 10 to provide secured access to document data 113 that is 
contained in the PDF file 1 10 to recipients hsted in the recipient list 115. 

In an altemate embodiment, object 1 17 is any data encapsulating 
and encrypting object with the characteristics of a PKCS#7 object." 
(emphasis added by Applicants) 

As can be seen by a careful reading of this passage, this passage states that PDF 
document data 113 (see Figure lb) may be browsed or viewed using a graphical user 
interface. This is different from what is claimed in Claim 1 for at least two reasons. 
First, the PDF document data that can be browsed or viewed is not an "enveloped data 
object". Rather, as expressly stated by Pravetz at Col. 3, lines 8-12, "A PDF 
document/data 113 contains one or more pages, each page in the document containing a 
combination of text, graphics and images. A PDF document/data 113 may also contain 
information such as hypertext links, sound and movies". PDF document data is also 
well-known to those of ordinary skill in the art, and those of ordinary skill in the art 
would certainly not equate PDF document data to the claimed "enveloped data object". 

Secondly, even assuming arguendo that PDF document data is the same as the 
claimed "enveloped data object" (which Applicants urge it is not), the passage cited by 
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the Examiner in rejecting Claim 1 merely states that the PDF document data can be 
"browsed" or "viewed" using a graphical user interface and a PDF viewer Application. 
This is in contrast to the specific claim language in Claim 1, which recites "modifying" 
the enveloped data object. A teaching of an ability to browse or view a document using a 
viewer application program does not teach the claimed step of 'modifying' a enveloped 
data object through processing of user actions within a graphical user interface. 

Thus, Claim 1 is shown to not be anticipated by the cited reference, in that the 
cited reference merely teaches viewing/browsing (in contrast to the claimed 'modifying') 
of PDF document/data using a graphical user interface, and therefore does not teach 
modifying an enveloped data object through processing of user actions within a graphical 
user interface, as claimed. 

AppUcants initially traverse the rejection of Claim 2 for reasons given above 
regarding Claim 1, of which Claim 2 depends upon. 

Applicants further traverse the rejection of Claim 2 by showing that the cited 
reference does not teach the claimed step of "wherein the enveloped data object is 
formatted according to PKCS (Private Key Cryptography Standard) standards, and 
wherein the enveloped data object is presented on the display". The Examiner cites 
Pravestz Col. 1, lines 55-67 in rejecting Claim 2 under 35 USC 102(b). Applicants show 
that while this passage does describe use of a Public Key Cryptography Standard number 
7 object which is referred to as an enveloped data object, this passage merely states that 
such an enveloped data object is embedded into a document and contains access 
information that is used to access the remainder of the document. There is no teaching of 
presenting the enveloped data object, as claimed. Applicants have amended Claim 2 to 
further clarify this distinction. Thus, Claim 2 is further shown to not be anticipated by 
the cited reference. 

Applicants initially traverse the rejection of Claim 3 for reasons given above 
regarding Claim 1, of which Claim 3 depends upon. 

Further with respect to Claim 3, Applicants show that the cited reference does not 
teach the claimed steps of displaying the enveloped data objects and displaying visual 
indicators between graphical objects. The Examiner cites Pravetz Col. 3, lines 43-61 as 
teaching the features of Claim 3. Applicant show that there, Pravetz states: 
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"FIG. 3a illustrates an embodiment of the PDF file 1 10 file 
structure. A header 300 specifies the version number of the PDF 
specification to which the PDF file adheres. A body 303 of a PDF file 110 
consists of a sequence of indirect objects representing a document. The 
objects represent components of the PDF document/data, such as fonts, 
pages and sampled images. A cross-reference table 305 contains 
information which permits random access to indirect objects in the file, 
such that the entire file need not be read to locate any particular object. 
Finally, a trailer 310 enables an application reading a PDF file 1 10 to 
quickly find the cross-reference table and to locate special objects. 

FIG. 3b illustrates an embodiment of a PDF object organization. 
The body of the PDF file 110 consists of a sequence of objects that 
collectively represent a single PDF document/data 113. An exemplary 
PDF file 1 10, as illustrated in FIG. 3b has a trailer object 310 which 
specifies the locations of the catalog object 312, the information object 
316 and encrypt dictionary object 307." 

As can be seen, this cited passage describes Pravetz FIGs 3a and 3b. Pravetz FIG. 3a 
shows the internal data structure of a PDF file 110, containing a header 300, body 303, 
cross reference table 305, and trailer 310. Neither this figure nor the associated 
discussion at Col, 3, lines 43-54 teach any operation steps at all, much less the claimed 
steps of displaying the enveloped data objects and displaying visual indicators between 
graphical objects, as claimed. Nor does Pravetz FIG. 3b or its associated discussion at 
Col. 3, lines 55-61 overcome this deficiency. Rather, FIG. 3b and its associated 
discussion describe an embodiment of a PDF object's internal organization. It does not 
teach any operation steps, much less the claimed steps of displaying the enveloped data 
objects and displaying visual indicators between graphical objects, as claimed. Thus, 
Claim 3 is further shown to not be anticipated by the cited reference. 

Applicants initially traverse the rejection of Claim 4 for reasons given above 
regarding Claim 3, of which Claim 4 depends upon. 
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Further with respect to Claim 4, Apphcants show that the cited reference does not 
teach the specific claimed steps of modifying an enveloped data object through 
processing of user actions within a graphical user interface, including steps of editing and 
saving data values of a selected data object, hi rejecting Claim 4, the Examiner cites 
Pravetz Col. 4, lines 57-61 as teaching these claimed features. Applicants show that, to 
the contrary, this cited passage does not teach any ability to modify an enveloped data 
object through processing of user actions within a graphical user interface, including the 
specifically claimed steps of editing and saving data values of a selected data object (the 
data object being contained within the enveloped data object). The cited passage 
mentions that PKCS#7 objects are ordered in an encrypt dictionary. This 'ordering' is 
not any type of editing of such objects through processing of user actions within a 
graphical user interface, as claimed. While the passage does go on to state that one of 
these objects may contain a list of user's who can edit a PDF document/data 113, this 
PDF document/data 1 13 is not an enveloped data object. As can be seen by Pravetz FIG. 
IB, Pravetz teaches a PDF file 110 contains a separate PDF document data 113 and a 
separate PKCS7 object 117. The edit permission described in the Pravetz cited passage is 
with respect to the PDF document data 113, and does not teach or otherwise disclose any 
ability to be able to modify the PKCS7 object 117 through processing of user actions 
within a graphical user interface. Thus, Claim 4 is further shown to not be anticipated by 
the cited reference. 

Applicants initially traverse the rejection of Claim 5 for reasons given above 
regarding Claim 4, of which Claim 5 depends upon. 

Further with respect to Claim 5, Applicants show that the cited reference does not \ 
teach the specific claimed steps of "identifying a data type of the data object represented 
by the selected graphical object, wherein the selected data object is a content data object", 
or "identifying a default editor for displaying the selected data object according to the 
identified data type of the data object represented by the selected graphical object". The 
Examiner cites Pravetz Col. 3, lines 13-18 as teaching these claimed steps. Applicants 
show that there, Pravetz states: 
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"The PDF document/data 113 may be browsed or viewed through 
a PDF viewer application 1 14 providing a graphical user interface (GUI). 
Adobe Acrobat Exchange.TM. or Acrobat Reader appUcations, both made 
available by Adobe Systems, Inc. of San Jose, Calif are exemplary PDF 
viewer appUcations 1 14." 

As can be seen, this passage merely states that a PDF document/data 113 may be browsed 
or viewed through a PDF viewer application. This does not teach the claimed steps 
recited in Claim 5. Claim 5 recites "identifying a data type of the data object represented 
by the selected graphical object, wherein the selected data object is a content data object". 
This cited passage does not teach or described any abihty to identify a data type of a data 
object represented by a selected graphic object. Thus, Claim 5 is further shown to not be 
anticipated by the cited reference. 

Applicants initially traverse the rejection of Claim 10 for reasons given above 
regarding Claim 3, of which Claim 10 depends upon. 

Further with respect to Claim 10, Applicants show that the cited reference does 
not teach the specific claimed steps of "receiving a user request to export the enveloped 
data object", or "storing the enveloped data object in DER-encoded format in the user- 
specified file". In rejecting Claim 10, the Examiner cites Pravetz Col. 5, lines 37-43 as 
teaching these missing claimed steps. Applicants show that this passage teaches use of 
an algorithm (specifically, a message digest algorithm) that is used to digest seed data to 
create a digest value that is a key used to decrypt encrypted data. Importantly, there is no 
teaching of any type of user request to export an enveloped data object, nor is there any 
teaching of storing the enveloped data object in DER-encoded format. In rejecting Claim 
10, the Examiner appears to be equating Pravetz teaching of a message digest algorithm 
with the claimed DER-encoded format. This is shown to be erroneous, as the message 
digest algorithm as taught by Pravetz is just that - an algorithm that is used to process 
data. It is not a format, much less a DER-encoded format. Rather, it is an algorithm that 
reads data (seeds) and then writes data (a digest value). There is simply no teaching of 
any type of DER-encoded format, nor the storing of an enveloped data object (as 
requested to be exported by a user request) in such a DER-encoded format. In addition, 
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as shown above, there is no teaching of any type of user request to export an enveloped 
data object. Thus, Claim 10 is further shown to not be anticipated by the cited reference. 

Applicants initially traverse the rejection of Claim 1 1 for reasons given above 
regarding Claim 3, of which Claim 1 1 depends upon. 

Further with respect to Claim 11, Applicants show that the cited reference does 
not teach the specific claimed steps of "receiving a user request to import the enveloped 
data object", or "importing the enveloped data object in DER-encoded format from the 
user-specified file". The Examiner states that receiving a request to export/import data 
and store data is taught at Pravetz Col. 5, lines 37-43. Applicants show error, in that this 
passage does not teach receipt of any type of user request, much less a user request to 
import an enveloped data object. Thus, Claim 1 1 is further shown to not be anticipated 
by the cited reference. 

As to the claimed importing and populating steps of Claim 11, the Examiner has 
not alleged any such teaching of such claimed steps. Thus, the Examiner has failed to 
even allege, much less establish, that all claimed elements of Claim 1 1 are taught by the 
cited reference. Claim 1 1 is thus further shown to have been erroneously rejected. 

Applicants traverse the rejection of Claims 24 and 47 for similar reasons to those 
given above regarding Claim 1. 

Applicants traverse the rejection of Claims 25 and 48 for similar reasons to those 
given above regarding Claim 2. 

Applicants traverse the rejection of Claims 26 and 49 for similar reasons to those 
given above regarding Claim 3. 

Applicants traverse the rejection of Claims 27 and 50 for similar reasons to those 
given above regarding Claim 4. 

Applicants traverse the rejection of Claim 28 for similar reasons to those given 
above regarding Claim 5. 

Applicants traverse the rejection of Claim 33 for similar reasons to those given 
above regarding Claim 10. 

Applicants traverse the rejection of Claim 34 for similar reasons to those given 
above regarding Claim 1 1 . 
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Therefore, the rejection of Claims 1-5, 10-11, 24-28, 33-34 and 47-50 under 35 
U.S.C. § 102 as being anticipated by Pravetz et al. (U.S. Patent No. 6,205,549) has been 
overcome. 

B. The Examiner rejected Claims 12, 16, 21-23, 39 and 44-46 under 35 U.S.C. § 
102(b) as being unpatentable over Pravetz (U.S. Patent No. 6,185,684). This rejection is 
respectfully traversed. 

The cited reference does not teach the claimed steps of "presenting an enveloped 
data object, and modifying the enveloped data object through processing of user actions 
within a graphical user interface" (recited in Claim 1, of which Claim 12 depends upon). 
Nor has the Examiner alleged any such teaching. Thus, the Examiner has failed to even 
allege, much less establish, that all claimed elements of Claim 12 are taught by the cited 
reference. Claim 12 is thus shown to have been erroneously rejected. 

Applicants further show with respect to Claim 12 that the cited reference does not 
teach the specific claimed steps of "receiving a user request to add a content data object 
to the enveloped data object", "determining whether an encryption key data object is 
embedded in the enveloped data object". Further regarding Claim 12, the cited reference 
does not teach "in response to a determination that an encryption key data object is not 
embedded in the enveloped data object: storing the content data object within the 
enveloped data object; displaying a graphical object representing the content data object, 
wherein the graphical object indicates that the content data object is embedded within the 
enveloped data object". Further regarding Claim 12, the cited reference does not teach 
"in response to a determination that an encryption key data object is embedded in the 
enveloped data object: generating an encrypted content data object within the enveloped 
data object, wherein the encrypted content data object comprises encrypted content for 
the content data object, a content type identifier for the encrypted content, and an 
encryption algorithm identifier; enabling a decrypt button for decrypting the encrypted 
content data object; and displaying a graphical object representing the encrypted content 
data object, wherein the graphical object indicates that the encrypted content data object 
is embedded within the enveloped data object." In rejected Claim 12, the Examiner cited 
Pravetz Col. 3, lines 54-67 and Col. 4, lines 1-47 as teachings all of the above listed steps. 
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Applicants show that to the contrary, this cited passage merely describes a static internal 
data structure as depicted in Pravetz FIG 3a and 3b. This cited passage does not teach 
any operational steps at all, but merely an internal data structure. Pravetz describes his 
operational steps in the description pertaining to FIG. 8, 9a, 9b, 10a and 10b. However, 
none of these figures or related discussion teach or otherwise describe any ability to 
modify an enveloped data object through processing of user actions within a graphical 
user interface, nor any ability to display a graphical object representing a content data 
object (requested to be added to an enveloped data object by a user request) or display a 
graphical object representing an encrypted content data object. Thus, Claim 12 is further 
shown to not be anticipated by the cited reference. 

With respect to Claim 16, Applicants show that the cited reference does not teach 
the claimed steps of "presenting an enveloped data object, and modifying the enveloped 
data object through processing of user actions within a graphical user interface" (recited 
in Claim 1, of which Claim 16 depends upon). 

Further with respect to Claim 16, Applicants show that such claim depends upon 
Claim 14, and thus incorporates the features recited in Claim 14. As Claim 14 is not 
being rejected under 35 USC 102(b), but rather under 35 USC 103, it is shown that Claim 
16 has been erroneously rejected under 35 USC 102(b) as the Examiner acknowledges 
that all features recited in Claim 14 are not taught in a single reference (as it is the subject 
of a 35 USC 103 rejection), and hence it is not possible that all features of Claim 16 
(which includes the features of Claim 14) are taught in a single reference. 

Further with respect to Claim 16, Applicants show that the cited reference does 
not teach the claimed steps of "in response to a determination that an encryption key data 
object is embedded in the enveloped data object, receiving user input requesting 
generation of a recipient information object". The Examiner states that this is taught by 
Pravetz Col. 4, lines 58-67 and Col. 5, lines 1-8. Applicants show that this cited passage 
does not teach any type of operational steps, such as those being claimed, but rather 
merely teaches an the internal organization/structure of a dictionary object. There is no 
teaching of any type of user co-action, such as receiving user input requesting generation 
of a recipient information object. Claim 16 is thus further shown to have been 
erroneously rejected. 
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Further with respect to Claim 16, AppUcants show that the cited reference does 
not teach the claimed steps of "displaying a graphical object representing the recipient 
information object, wherein the graphical object indicates that the recipient information 
object is embedded within the enveloped data object; and displaying a visual indicator 
representing a logical association between the recipient information object and an 
associated certificate object". The Examiner states that this is taught by Pravetz Col. 4, 
lines 58-67 and Col. 5, lines 1-8. Applicants show error, in that this cited passage does 
not teach any type of operational steps, such as those being claimed, but rather merely 
teaches an the intemal organization/structure of a dictionary object shown in FIGs. 4 and 
5. These figures depict an intemal data structure (Pravetz Col. 2, lines 7-9), and do not 
teach any type of operational step of displaying a graphical object, as claimed. Thus, 
Claim 16 is still further shown to not be anticipated by the cited reference. 

With respect to Claim 21, Applicants show that the cited reference does not teach 
the claimed steps of "presenting an enveloped data object', and modifying the enveloped 
data object through processing of user actions within a graphical user interface" (recited 
in Claim 1, of which Claim 21 ultimately depends upon). 

Further with respect to Claim 21, Applicants show that such claim depends upon 
Claim 3, and thus incorporates the features recited in Claim 3. As Claim 3 is not being 
rejected under 35 USC 102(b) over Pravetz (U.S. Patent No. 6,185,684), it is shown that 
Claim 21 has been erroneously rejected under 35 USC 102(b) over Pravetz (U.S. Patent 
No. 6,185,684) as the features of Claim 3 (of which Claim 21 depends upon) have not 
been established by the Examiner to be taught in a single reference. 

Further with respect to Claim 21, Applicants show that the cited reference does 
not teach the claimed step of "receiving a user request to encrypt a content data object 
embedded in the enveloped data object". In rejecting Claim 21, the Examiner cites 
Pravetz Col. 3, lines 54-67 and Col. 4, lines 1-47. Applicants show that these cited 
passages describe the intemal data structure as depicted in Pravetz FIGs. 3a and 3b. 
There is no teaching of any type of user co-action, such as receiving a user request as 
claimed, and thus Claim 21 is further shown to have been erroneously rejected. 

Further with respect to Claim 21, Applicants show that the cited reference does 
not teach the claimed steps of "enabling a decrypt button for decrypting the encrypted 
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content data object" or "displaying a graphical object representing the encrypted content 
data object, wherein the graphical object indicates that the encrypted content data object 
is embedded within the enveloped data object". The Examiner cites Pravetz Col. 3, Hnes 
54-67 and Col. 4, lines 1-47 in rejecting Claim 21. Applicants show that these cited 
passages describe the internal data structure as depicted in Pravetz FIGs. 3 a and 3h, and 
do not teach any step of enabling a decrypt button or displaying graphical objects, as 
claimed. Claim 21 is thus further shown to not be anticipated by the cited reference. 

With respect to Claim 22, Applicants show that the cited reference does not teach 
the claimed steps of "presenting an enveloped data object; and modifying the enveloped 
data object through processing of user actions within a graphical user interface" (recited 
in Claim 1, of which Claim 22 ultimately depends upon). 

Further with respect to Claim 22, Applicants show that such claim depends upon 
Claim 3, and thus incorporates the features recited in Claim 3. As Claim 3 is not being 
rejected under 35 USC 102(b) over Pravetz (U.S. Patent No. 6,185,684), it is shown that 
Claim 22 has been erroneously rejected under 35 USC 102(b) over Pravetz (U.S. Patent 
No. 6,185,684) as the features of Claim 3 (of which Claim 22 depends upon) have not 
been established by the Examiner to be taught in a single reference. 

Further with respect to Claim 22, Applicants show that the cited reference does 
not teach the claimed steps of "receiving a user request to decrypt an encrypted content 
data object embedded in the enveloped data object", "enabling a encrypt button for 
encrypting the content data object", or "displaying a graphical object representing the 
content data object, wherein the graphical object indicates that the content data object is 
embedded within the enveloped data object". In rejecting Claim 22, the Examiner cites 
Pravetz Col. 6, lines 1 1-52. Applicants show that, to the contrary, this passage does not 
teach any step of "receiving a user request". Nor does this passage teach any step of 
enabling an encrypt button or displaying any type of graphical object, much less one that 
representing the content data object and indicates that the content data object is 
embedded within the enveloped data object". Thus, Claim 22 is still fUrther shown to 
have been erroneously rejected. 

With respect to Claim 23, Applicants show that the cited reference does not teach 
the claimed steps of "presenting an enveloped data object, and modifying the enveloped 
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data object through processing of user actions within a graphical user interface" (recited 
in Claim 1, of which Claim 23 ultimately depends upon). 

Further with respect to Claim 23, Applicants show that such claim depends upon 
Claim 3, and thus incorporates the features recited in Claim 3. As Claim 3 is not being 
rejected under 35 USC 102(b) over Pravetz (U.S. Patent No. 6,185,684), it is shown that 
Claim 23 has been erroneously rejected under 35 USC 102(b) over Pravetz (U.S. Patent 
No. 6,185,684) as the features of Claim 3 (of which Claim 23 depends upon) have not 
been established by the Examiner to be taught in a single reference. 

Further with respect to Claim 23, Applicants show that the cited reference does 
not teach the claimed steps of "receiving a user request to select an encryption key 
algorithm". The Examiner cites Pravetz Col. 8, lines 5-25 as teaching this claimed 
feature. Applicants have reviewed this passage thoroughly, and the only user action that 
is described is at Col. 8, lines 8-9, where a recipient "attempts to access the data 113 in a 
PDF file 1 10". There is no mention or discussion of receiving a user request to select any 
type of algorithm, much less an encryption key algorithm, as claimed. Thus, Claim 23 is 
still further shown to not be anticipated by the cited reference. 

Applicants traverse the rejection of Claim 39 for similar reasons to those given 
above regarding Claim 16. 

Applicants traverse the rejection of Claim 44 for similar reasons to those given 
above regarding Claim 21. 

Applicants traverse the rejection of Claim 45 for similar reasons to those given 
above regarding Claim 22. 

Applicants traverse the rejection of Claim 46 for similar reasons to those given 
above regarding Claim 23. 

Therefore, the rejection of Claims 12, 16, 21-23, 39 and 44-46 under 35 US.C. § 
102(b) as being unpatentable over Pravetz (U.S. Patent No. 6,185,684) has been 
overcome. 
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IV. 35 U.S.C. S 103, Obviousness 

A. The Examiner rejected Claims 6-8, 14, 18, 29-31, 37 and 41 under 35 U.S.C. § 
103 as being unpatentable over Pravetz et al. (U.S. Patent No. 6,205,549) in view of 
Atkinson et al (U.S. Patent No. 6,367,012). This rejection is respectfully traversed. 

With respect to Claim 6, Applicants initially traverse for similar reasons to those 
given above regarding Claim 1, and show that none of the cited references teach or 
suggest the claimed steps of "presenting an enveloped data object, and modifying the 
enveloped data object through processing of user actions within a graphical user 
interface" (recited in Claim 1, of which Claim 6 ultimately depends upon). 

Further with respect to Claim 6, Applicants traverse for similar reasons to those 
given above regarding Claim 4, and show that none of the cited references teach or 
suggest the claimed features of "the enveloped data object is presented on the display", 
wherein the enveloped data object is formatted according to PKCS (Private Key 
Cryptography Standard) standards (recited in Claim 2); displaying the enveloped data 
objects and displaying visual indicators between graphical objects (recited in Claim 3); or 
modifying an enveloped data object, including editing and saving data values of a 
selected data object (recited in Claim 4). 

Further with respect to Claim 6, Applicants show that none of the cited references 
teach or suggest the claimed steps of "selecting a graphical object representing a data 
object contained within the enveloped data object", "receiving a user action on the 
selected graphical object representing a deletion request", or "deleting from the 
enveloped data object the data object represented by the selected graphical request". In 
rejecting Claim 6, the Examiner states that this is taught by Atkinson at Col. 19, lines 52- 
67 and Col. 20, lines 1-3. Applicants show that there, Atkinson states: 

"The following fields should not or can not be included in a 
message digest. Attribute or publisher certificates are omitted from the 
calculation of a message digest that resides within the certificate. The 
overall integrity of the image file is not affected by adding or removing 
certificates. To exclude attribute certificate information from the message 
digest calculation, the following information is excluded from that 
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calculation: the certificate table field of the optional header data 
directories and the certificate table and corresponding certificates pointed 
to by the certificate table field. 

Debug information may be considered advisory to debuggers and 
does not affect the integrity of the actual executable program. The debug 
information can be removed fi"om an image file without affecting its 
fianctionality. (Deletion of debug information is sometimes used to reduce 
the size of distributed image files.) To exclude debug information from a 
message digest, the foUov^ing information is excluded from that 
calculation: the debug entry of the data directory in v^ith optional header 
and the debug section." 

As can be seen by a careful review of this cited passage, there is no mention, discussion 
or teaching of any type of user action. Nor is there any teaching or suggestion of a 
graphical object selection that represents a data object contained within an enveloped 
data object, or deleting from the enveloped data object the data object represented by the 
selected graphical request, as claimed. Rather, this passage teaches that certain fields 
should not be included in a message digest calculation. The message digest is similar to a 
file checksum in that they produce a value that relates to the integrity of a file (Atkinson 
Col. 19, lines 27-40). Thus, the operations described by the cited Atkinson passage have 
nothing to do with a user action or with selection of a graphical object. The only user 
dialogue described by the cited Atkinson reference is with respect to Figure 7 and related 
discussion at Col. 8, line 52 - Col. 9, line 30. There is no mention of a user action that 
represents a delete request, such as the claimed step of "receiving a user action on the 
selected graphical object representing a deletion request" or "deleting from the enveloped 
data object the data object represented by the selected graphical request". Therefore, 
Claim 6 is fiirther shown to have been erroneously rejected, as there is at least one 
missing claimed element not taught or suggested by the cited references. 

Applicants initially traverse the rejection of Claim 7 for all the reasons given 
above regarding Claim 6, of which Claim 7 depends upon. 
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Further with respect to Claim 7, Applicants show that none of the cited references 
teach or suggest the claimed step of "in response to a determination that the certificate 
object is logically associated with a different certificate object embedded within the 
enveloped data object, removins a visual indicator representing a logical association 
between the certificate object and the different certificate objecf\ In rejecting Claim 7, 
the Examiner states that Atkinson teaches this claimed step at Col. 10, lines 59-67, Col. 
11, lines 1, 5-20, 29-31, 57-67 and Col. 12, lines 2-8 and 15-21. Applicants have 
reviewed these passages extensively and can find no mention of any type of visual 
indicator or removal thereof. 

Further with respect to Claim 7, Applicants show that none of the cited references 
teach or suggest the claimed step of "in response to a determination that the certificate 
object is logically associated with a recipient information object. . . removing a visual 
indicator representing a logical association between the certificate object and the 
recipient information object". In rejecting Claim 7, the Examiner states that Atkinson 
teaches this claimed step at Col. 19, lines 55-61. Applicants show that this passage 
merely describes information that is to be included or excluded in a numeric calculation 
(the message digest calculation) and has nothing to do removal of a visual indicator, as 
claimed. Therefore, Claim 7 is fiarther shown to have been erroneously rejected as there 
are numerous missing claimed elements not taught or suggested by the cited references. 

Applicants initially traverse the rejection of Claim 8 for all the reasons given 
above regarding Claim 6, of which Claim 8 depends upon. 

Further with respect to Claim 8, Applicants show that none of the cited references 
teach or suggest the claimed steps of "in response to a determination that the selected 
graphical object represents a certificate revocation list object: determining whether the 
certificate revocation list object is logically associated with a certificate object" or "in 
response to a determination that the certificate revocation list object is logically 
associated with a certificate object, removing a visual indicator representing a logical 
association between the certificate object and the certificate revocation list object". In 
rejecting Claim 8, the Examiner states that Atkinson teaches this claimed step at Col. 25, 
lines 1-23 and Figure 10. Applicants show that this passage merely describes that a 
listing of revoked certificates is obtained, and if a certificate is revoked, a dialogue is 
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rendered. There is no teaching or suggestion of any type of graphical object selection^ or 
removal of a visual indicator representing a logical association between the certificate 
object and the certificate revocation list object. Thus, Claim 8 is further shown to have 
been erroneously rejected as there are numerous missing claimed elements not taught or 
suggested by the cited references. 

With respect to Claim 14, Applicants initially traverse for similar reasons to those 
given above regarding Claim 1, and show that none of the cited references teach or 
suggest the claimed steps of "presenting an enveloped data object, and modifying the 
enveloped data object through processing of user actions within a graphical user 
interface" (recited in Claim 1, of which Claim 14 depends upon). 

Further with respect to Claim 14, Applicants show that none of the cited 
references teach or suggest the claimed steps of ''receiving a user request to add a 
certificate object to the enveloped data object", or ''displaying a graphical object 
representing the certificate object, wherein the graphical object indicates that the 
certificate object is embedded within the enveloped data object". In rejecting Claim 14, 
the Examiner states that this is taught by Atkinson at Col. 25, lines 1-34. Applicants 
show that to the contrary, this passage does not teach any type of user request. In 
addition, the only thing displayed by Atkinson in this passage is a dialogue that a digital 
certificate is revoked. In contrast. Claim 14 is directed to a certificate object that is 
embedded within the enveloped data object, and the display of a graphical object 
representing such embedded certificate object. An indication that a certificate has been 
revoked provides no information, status or display of whether an object is embedded. 
Hence, Claim 14 is further shown to have been erroneously rejected. 

Applicants traverse the rejection of Claim 29 for similar reasons to those given 
above regarding Claim 6. 

Applicants traverse the rejection of Claim 30 for similar reasons to those given 
above regarding Claim 7. 

Applicants traverse the rejection of Claim 31 for similar reasons to those given 
above regarding Claim 8. 

Applicants traverse the rejection of Claims 18, 37 and 41 for similar reasons to 
those given above regarding Claim 14. 
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B. The Examiner rejected Claims 9, 15, 19, 32, 38 and 42 under 35 U.S.C. § 103 as 
being unpatentable over Pravetz et al (U.S. Patent No. 6,205,549) in view of Mitty et al. 
(U.S. Patent No. 6,199,052). This rejection is respectfully traversed. 

With respect to Claim 9, Applicants initially traverse for similar reasons to those 
given above regarding Claim 1, and show that none of the cited references teach or 
suggest the claimed steps of "presenting an enveloped data object; and modifying the 
enveloped data object through processing of user actions within a graphical user 
interface" (recited in Claim 1, of which Claim 9 ultimately depends upon). 

Further with respect to Claim 9, Applicants traverse for similar reasons to those 
given above regarding Claim 3, and show that none of the cited references teach or 
suggest the claimed steps displaying the enveloped data objects and displaying visual 
indicators between graphical objects (recited in Claim 3). 

Still further with respect to Claim 9, Applicants show that none of the cited 
references teach or suggest the claimed step of "m response to a determination that the 
enveloped data object contains a recipient information object^ sending an e-mail message 
comprising the enveloped data object to the one or more e-mail addresses". Nor has the 
Examiner alleged any such teaching or suggestion that the sending is responsive to a 
determination that the enveloped data object contains a recipient information object. 
Therefore, the Examiner has failed to establish a prima facie showing of obviousness 
with respect to Claim 9 and the burden has not shifted to Apphcants to rebut an 
obviousness assertion. 

With respect to Claim 15, Applicants initially traverse for similar reasons to those 
given above regarding Claim 1, and show that none of the cited references teach or 
suggest the claimed steps of "presenting an enveloped data object; and modifying the 
enveloped data object through processing of user actions within a graphical user 
interface" (recited in Claim 1, of which Claim 9 ultimately depends upon). 

Further with respect to Claim 15, Applicants show that none of the cited 
references teach or suggest the claimed steps of ''receiving a user request to add a 
certificate object to the enveloped data object", or ''displaying a graphical object 
representing the certificate object, wherein the graphical object indicates that the 
certificate object is embedded within the enveloped data object" (recited in Claim 14, of 
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which Claim 15 depends upon). Nor has the Examiner alleged any such teaching or 
suggestion. Therefore, the Examiner has failed to establish a prima facie showing of 
obviousness with respect to Claim 15 and the burden has not shifted to Applicants to 
rebut an obviousness assertion. 

With respect to Claim 19, Applicants initially traverse for similar reasons to those 
given above regarding Claim 1, and show that none of the cited references teach or 
suggest the claimed steps of "presenting an enveloped data objects and modifying the 
enveloped data object through processing of user actions within a graphical user 
interface" (recited in Claim 1, of which Claim 19 ultimately depends upon). 

Further with respect to Claim 19, Applicants show that none of the cited 
references teach or suggest the claimed steps of "receiving a user request to add a 
certificate revocation list object to the enveloped data object", or "displaying a graphical 
object representing the certificate revocation list object, wherein the graphical object 
indicates that the certificate revocation list object is embedded within the enveloped data 
object" (recited in Claim 18, of which Claim 19 depends upon). Nor has the Examiner 
alleged any such teaching or suggestion. Therefore, the Examiner has failed to establish 
a prima facie showing of obviousness with respect to Claim 19 and the burden has not 
shifted to Applicants to rebut an obviousness assertion. 

Applicants traverse the rejection of Claim 32 for similar reasons to those given 
above regarding Claim 9. 

Applicants traverse the rejection of Claim 38 for similar reasons to those given 
above regarding Claim 15, and shows that the Examiner has failed to allege that the cited 
references teach or suggest "sixth receiving means for receiving a user request to add a 
certificate object to the enveloped data object; third storing means for storing the 
certificate object in the enveloped data object; and sixth displaying means for displaying 
a graphical object representing the certificate object, wherein the graphical object 
indicates that the certificate object is embedded within the enveloped data object" as 
recited in Claim 37 (of which Claim 38 depends upon). Therefore, a prima facie case of 
obviousness has not been made with respect to Claim 38. 

Applicants traverse the rejection of Claim 42 for similar reasons to those given 
above regarding Claim 19, and shows that the Examiner has failed to allege that the cited 
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references teach or suggest "seventh receiving means for receiving a user request to add a 
certificate revocation list object to the enveloped data object; third storing means for 
storing the certificate revocation list object in the enveloped data object; and tenth 
displaying means for displaying a graphical object representing the certificate revocation 
list object, wherein the graphical object indicates that the certificate revocation list object 
is embedded within the enveloped data object" as recited in Claim 41 (of which Claim 42 
depends upon). Therefore, a prima facie case of obviousness has not been made with 
respect to Claim 42. 

C. The Examiner rejected Claims 13, 17, 20, 36, 40 and 43 under 35 U.S.C. § 103 as 
being unpatentable over Pravetz et al. (U.S. Patent No. 6,205,549) and Mitty et al. (U.S. 
Patent No. 6,199,052) and fiirther in view of Tysen et al. (U.S. Patent No. 5,497,422). 
This rejection is respectfully traversed. 

The Examiner has failed to estabUsh a prima facie showing of obviousness with 
respect to Claim 13, and the burden has therefore not shifted to Applicants to rebut 
obviousness. Claim 13 was rejected using the Pravetz et al. (U.S. Patent No. 6,205,549) 
reference. However, Claim 13 depends upon Claim 12. Claim 12 was rejected using a 
different Pravetz reference (Pravetz U.S. Patent No. 6,185,684). As Claim 13 depends 
upon Claim 12, it incorporates all the claimed features of Claim 12. In rejecting Claim 
13, the Examiner has failed to allege or otherwise establish that any of the cited 
references used in rejecting Claim 13 (specifically, Pravetz et al. (U.S. Patent No. 
6,205,549); Mitty et al. (U.S. Patent No. 6,199,052);Tysen et al. (U.S. Patent No. 
5,497,422)) teach or suggest the features recited in Claim 12 (specifically, receiving a 
user request to add a content data object to the enveloped data object; determining 
whether an encryption key data object is embedded in the enveloped data object; in 
response to a determination that an encryption key data object is not embedded in the 
enveloped data object: storing the content data object within the enveloped data object; 
displaying a graphical object representing the content data object, wherein the graphical 
object indicates that the content data object is embedded within the enveloped data 
object; in response to a determination that an encryption key data object is embedded in 
the enveloped data object: generating an encrypted content data object within the 
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enveloped data object, wherein the encrypted content data object comprises encrypted 
content for the content data object, a content type identifier for the encrypted content, and 
an encryption algorithm identifier; enabling a decrypt button for decrypting the encrypted 
content data object; and displaying a graphical object representing the encrypted content 
data object, wherein the graphical object indicates that the encrypted content data object 
is embedded within the enveloped data object). Thus, the Examiner has failed to 
establish a prima facie showing of obviousness with respect to Claim 13 

With respect to dependent Claims 17, 20, 40 and 43, Applicants traverse for 
reasons given above regarding the claims which they each respectively depend upon. 

With respect to Claim 36, Applicants show that none of the cited references teach 
or suggest, nor has the Examiner alleged any teaching or suggestion of "fifth receiving 
means for receiving a user request to add a content data object to the enveloped data 
object; eighth determining means for determining whether an encryption key data object 
is embedded in the enveloped data object; second storing means for storing, in response 
to a determination that an encryption key data object is not embedded in the enveloped 
data object, the content data object within the enveloped data object; fourth displaying 
means for displaying, in response to a determination that an encryption key data object is 
not embedded in the enveloped data object, a graphical object representing the content 
data object, wherein the graphical object indicates that the content data object is 
embedded within the enveloped data object; first generating means for generating, in 
response to a determination that an encryption key data object is embedded in the 
enveloped data object, an encrypted content data object within the enveloped data object, 
wherein the encrypted content data object comprises encrypted content for the content 
data object, a content type identifier for the encrypted content, and an encryption 
algorithm identifier; first enabling means for enabling, in response to a determination that 
an encryption key data object is embedded in the enveloped data object, a decrypt button 
for decrypting the encrypted content data object; and fifth displaying means for 
displaying, in response to a determination that an encryption key data object is embedded 
in the enveloped data object, a graphical object representing the encrypted content data 
object, wherein the graphical object indicates that the encrypted content data object is 
embedded within the enveloped data object", which are features recited in Claim 35, of 
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which Claim 36 depends upon. Therefore, the Examiner has failed to establish a prima 
facie showing of obviousness with respect to Claim 36 and the burden has not shifted to 
Applicants to rebut an obviousness assertion 

D. Therefore, the rejection of Claims 6-8, 9, 13-15, 17-20, 29-32, 36-38 and 40-43 
under 35 U.S.C. § 103 has been overcome. 

V. Claim 35 

Applicants show that Claim 35 is allowable as no statutory basis has been given in 
rejecting Claim 35 (which was indicated as being rejected on the Office Action Summary 
Page in the 10/02/2003 Office Action). Applicants show that they are entitled to have 
such claim allowed per 35 U.S.C. 102, where it states "A person shall be entitled to a 
patent unless—' (emphasis added by Applicants) and none of the listed 'unless' 
provisions has been properly established by the Examiner. 



Page 40 of 41 
Shrader et al. - 09/460,839 



VI. Conclusion 

It is respectfully urged that the subject application is patentable over the cited 
references and is now in condition for allowance. The Examiner is invited to call the 
undersigned at the below-listed telephone number if in the opinion of the Examiner such 
a telephone conference would expedite or aid the prosecution and examination of this 
application. 

DATE: \^ f{^/^^ 

Respectfully submitted, 




Reg. No. 34,285 

Wayne P. Bailey 

Reg. No. 34,289 

Carstens, Yee & Cahoon, LLP 

P.O. Box 802334 

Dallas, TX 75380 

(972) 367-2001 

Attorneys for Applicants 
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